I agree that the easiest solution is to not collect the data, but I've worked at places that dealt with sensetive data and those limited who could see that data

I agree that the easiest solution is to not collect the data, but I've worked at places that dealt with sensetive data and those limited who could see that data and when. Having procedures whereby anyone accessing sensetive data for oncall debugging work needs to inform at least one other person helps (and people not running production apps should not have access at all). Besides that it feels like facebook never tried to create a culture within its company that respected customers privacy, so that will lead to people with already shaky moral compasses having a easier way to justify (for themselves) this sort of violation. Your suggestion that the only solution is to not collect the data makes a lot of services impossible, including all banking, mapping, social media, and so on. Some services need that data to provide services that we want to be possible so lets make sure those are run in ethical ways.